$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef170213-ef0a-4184-aca6-beda97fd7b0f.roa File: ef170213-ef0a-4184-aca6-beda97fd7b0f.roa (raw, json) Hash identifier: BEOJ7tISvWi35ru6Dnq0qn7RHti3EAwUtF7bO3rBA5g= Subject key identifier: 97:B2:AC:C2:53:D4:82:8F:B2:76:E1:A6:10:B7:FC:7C:E9:83:BF:EC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 63CDFF063DC78EAC5AE74DEDFED5E0837EFC44B2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef170213-ef0a-4184-aca6-beda97fd7b0f.roa Signing time: Tue 20 May 2025 15:51:51 +0000 ROA not before: Tue 20 May 2025 15:51:51 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.181.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:cd:ff:06:3d:c7:8e:ac:5a:e7:4d:ed:fe:d5:e0:83:7e:fc:44:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 15:51:51 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=aef11b54a3a46ee06eec1022446060d6667b0ee93dd0f112691a990426582b8f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:57:c3:76:c3:d8:16:8a:1a:ff:f7:eb:f0:36: e2:5c:68:f8:87:bf:e0:77:39:c8:c0:f9:c6:e4:09: 3a:8c:42:e9:4c:de:7c:fe:16:2e:a1:c6:4b:cc:e7: f3:09:97:ce:6a:54:5e:e1:f6:fc:f5:e5:e8:6e:4e: 1a:e9:71:ab:9d:4a:d3:d7:f7:c3:97:74:1e:21:0a: 70:3f:a9:7f:28:f5:3d:48:de:3f:7e:f3:e3:55:44: 51:c6:65:ee:57:21:63:d8:58:eb:9e:2f:01:d9:87: 53:25:64:08:5e:02:f3:a4:e5:c8:e3:7b:0a:fb:b1: f0:6d:aa:e4:e1:ad:54:9e:fc:f2:52:6a:f8:69:f5: c8:02:74:35:c0:13:0f:bc:ad:d2:bc:84:1e:4e:d1: a5:e0:75:49:f3:95:ae:3e:ad:e9:8b:48:ae:7c:97: 1e:fd:7b:d4:64:72:30:24:d4:a5:f2:af:2e:f2:35: bd:0b:fd:cf:ce:c3:65:1b:b6:cd:9c:55:ce:e4:ac: 18:c4:2c:90:e2:fd:36:7e:89:e0:a0:3b:f9:b3:4d: d6:a3:b3:a8:ca:bc:40:58:8a:86:ea:73:94:5c:d4: 26:be:e6:6b:82:aa:5a:26:9b:06:45:e6:21:90:47: c1:2b:c7:cf:30:e4:3b:64:a0:30:e8:51:36:db:78: ee:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B2:AC:C2:53:D4:82:8F:B2:76:E1:A6:10:B7:FC:7C:E9:83:BF:EC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef170213-ef0a-4184-aca6-beda97fd7b0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.181.192.0/19 Signature Algorithm: sha256WithRSAEncryption 24:26:3d:68:6a:a2:7c:23:63:19:19:82:1d:cb:bf:ac:1f:c1: df:ee:66:08:33:e5:6c:51:f3:93:78:c1:99:76:4c:a3:a6:8f: a7:35:58:d5:d2:cc:d2:12:dd:32:51:a4:01:e2:a8:17:6f:97: e5:5a:66:5c:4b:b6:d2:b1:be:d8:67:ab:dd:96:66:c9:04:8b: 09:12:02:e6:b3:35:ef:a9:80:07:48:29:54:00:71:fb:b1:50: 1f:59:44:42:14:41:4b:da:8b:7a:0c:bf:ad:df:26:85:7c:82: 47:b5:3c:e2:2e:64:69:53:98:c8:32:7e:56:f8:ce:34:49:b8: b9:e3:90:02:57:bd:f4:7c:2b:82:ae:7c:48:75:31:0c:93:57: 25:59:57:17:3b:9b:ff:a9:0d:b8:98:b5:02:1d:61:32:bd:47: 03:42:aa:79:37:f3:b7:6e:6a:74:24:76:03:b8:8f:03:1d:2c: 1a:80:8f:9e:9c:79:b5:47:6f:11:87:a4:4f:ad:68:94:b5:53: a2:96:82:7d:eb:69:36:68:72:ca:26:d4:cc:37:5a:0f:3e:85: 77:b5:d6:87:83:27:26:cd:14:de:f0:06:b8:bf:b9:81:20:b7: 50:e0:37:7e:71:ac:a9:b4:4d:0e:7f:db:38:2f:8f:78:f3:7a: 56:71:6a:48 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY83/Bj3Hjqxa503t/tXgg378RLIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTU1MTUxWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZWYxMWI1NGEzYTQ2ZWUwNmVlYzEwMjI0NDYwNjBkNjY2 N2IwZWU5M2RkMGYxMTI2OTFhOTkwNDI2NTgyYjhmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxV8N2w9gWihr/9+vwNuJcaPiHv+B3OcjA+cbkCTqMQulM 3nz+Fi6hxkvM5/MJl85qVF7h9vz15ehuThrpcaudStPX98OXdB4hCnA/qX8o9T1I 3j9+8+NVRFHGZe5XIWPYWOueLwHZh1MlZAheAvOk5cjjewr7sfBtquThrVSe/PJS avhp9cgCdDXAEw+8rdK8hB5O0aXgdUnzla4+remLSK58lx79e9RkcjAk1KXyry7y Nb0L/c/Ow2Ubts2cVc7krBjELJDi/TZ+ieCgO/mzTdajs6jKvEBYiobqc5Rc1Ca+ 5muCqlommwZF5iGQR8Erx88w5DtkoDDoUTbbeO7lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUl7KswlPUgo+yduGmELf8fOmDv+wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VmMTcwMjEzLWVmMGEtNDE4NC1hY2E2LWJlZGE5N2ZkN2IwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUPtcAwDQYJKoZIhvcNAQELBQADggEBACQmPWhqonwjYxkZgh3Lv6wfwd/u Zggz5WxR85N4wZl2TKOmj6c1WNXSzNIS3TJRpAHiqBdvl+VaZlxLttKxvthnq92W ZskEiwkSAuazNe+pgAdIKVQAcfuxUB9ZREIUQUvai3oMv63fJoV8gke1POIuZGlT mMgyflb4zjRJuLnjkAJXvfR8K4KufEh1MQyTVyVZVxc7m/+pDbiYtQIdYTK9RwNC qnk387duanQkdgO4jwMdLBqAj56cebVHbxGHpE+taJS1U6KWgn3raTZocsom1Mw3 Wg8+hXe11oeDJybNFN7wBri/uYEgt1DgN35xrKm0TQ5/2zgvj3jzelZxakg= -----END CERTIFICATE-----Generated at Fri Jun 6 04:33:57 2025 by rpki-client